Re: Relay based on either auth or cert?

2021-05-12 Thread Edgar Pettijohn
On May 11, 2021 8:35 PM, Sean Kamath wrote:I was pondering a message Gille Chehade commented on (https://narkive.com/2puCGKoq.4) a very long time ago. He said: > The cert verification happens at the transport level, not the SMTP level > and an invalid certificate will cause TLS to abort and

Re: smtpctl spf walk -6 ?

2021-05-12 Thread Martijn van Duren
On Wed, 2021-05-12 at 15:45 +0200, Harald Dunkel wrote: > On 5/12/21 2:56 PM, Martijn van Duren wrote: > > Apparently it's a problem in glibc's inet_net_pton. It does not support > > AF_INET6. to.c has the same problem and works around this problem by > > handcrafting broken_inet_net_pton_ipv6().

Re: smtpctl spf walk -6 ?

2021-05-12 Thread Harald Dunkel
On 5/12/21 2:56 PM, Martijn van Duren wrote: Apparently it's a problem in glibc's inet_net_pton. It does not support AF_INET6. to.c has the same problem and works around this problem by handcrafting broken_inet_net_pton_ipv6(). Would it be possible to use inet_pton() ? Regards Harri

Re: smtpctl spf walk -6 ?

2021-05-12 Thread Martijn van Duren
On Wed, 2021-05-12 at 13:33 +0200, Harald Dunkel wrote: > On 5/12/21 8:56 AM, nathanael wrote: > > > > this is what i get on my machine: > > > > ~ echo spf.protection.outlook.com | smtpctl spf walk > > 40.92.0.0/15 > > 40.107.0.0/16 > > 52.100.0.0/14 > >

Re: smtpctl spf walk -6 ?

2021-05-12 Thread Reio Remma
On 12.05.2021 14:33, Harald Dunkel wrote: On 5/12/21 8:56 AM, nathanael wrote: this is what i get on my machine: ~ echo spf.protection.outlook.com | smtpctl spf walk 40.92.0.0/15 40.107.0.0/16 52.100.0.0/14 104.47.0.0/17 2a01:111:f400::/48 2a01:111:f403::/48

Re: smtpctl spf walk -6 ?

2021-05-12 Thread Harald Dunkel
On 5/12/21 8:56 AM, nathanael wrote: this is what i get on my machine: ~ echo spf.protection.outlook.com | smtpctl spf walk 40.92.0.0/15 40.107.0.0/16 52.100.0.0/14 104.47.0.0/17 2a01:111:f400::/48 2a01:111:f403::/48 51.4.72.0/24

Re: Relay based on either auth or cert?

2021-05-12 Thread Edgar Pettijohn
On May 11, 2021 8:35 PM, Sean Kamath wrote:I was pondering a message Gille Chehade commented on (https://narkive.com/2puCGKoq.4) a very long time ago. He said: > The cert verification happens at the transport level, not the SMTP level > and an invalid certificate will cause TLS to abort and

Re: smtpctl spf walk -6 ?

2021-05-12 Thread nathanael
Harald Dunkel wrote: > Hi folks, > > I am a big fan of IPv6, so I wonder why smtpctl spf walk omits > all the IPv6 addresses? > > # echo spf.protection.outlook.com | smtpctl spf walk > 40.92.0.0/15 > 40.107.0.0/16 > 52.100.0.0/14 > 104.47.0.0/17 >

smtpctl spf walk -6 ?

2021-05-12 Thread Harald Dunkel
Hi folks, I am a big fan of IPv6, so I wonder why smtpctl spf walk omits all the IPv6 addresses? # echo spf.protection.outlook.com | smtpctl spf walk 40.92.0.0/15 40.107.0.0/16 52.100.0.0/14 104.47.0.0/17 51.4.72.0/24 51.5.72.0/24